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Amendments to the Claims : 

This listing of claims will replace all prior version, and listings, of claims in the 
application. 

Listing of Claims : 

1 (Currently amended) A method for delivery of a license-managed toolset for creating 
a license-managed software product, the method comprising the step of: 

(a) providing an authorization process, the authorization process including the 
steps of: 

(i) creating a first public and private key pair for a software publisher, 

(ii) creating a second public and private key pair for a software program, 
wherein at least one of the second private and public keys is digitally 
signed by the first private key of the software publisher. 

(iii) creating an authorization program for the software program, and 
embedding a copy of the first and second public keys in the 
authorization program, 

(iv) combining the authorization program with a software program, such 
that when the software program is invoked on a computer, the 
authorization program obtains a license for the software program by: 

(1) creating a license request, 

(2) encrypting a-the license request using the second public key, 

(3) transmitting the encrypted license request to a key authority, 

(4) receiving an encrypted license from the key authority, wherein the 
license includes license terms, and 
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(5) decrypting the license using the first public key, such that the 
license terms are used to control use of the software program; 

(b) implementing the authorization process in the-a_software toolset that is 
provided by a toolset publisher, wherein when the authorization process is 
invoked in the software toolset, the toolset publisher is the publisher in the 
authorization process and the software toolset is the software program in the 
authorization process, and 

(c) implementing the authorization process in the-a_software product that is 
provided by a publisher of the software product using the software toolset, 
wherein when the authorization process is invoked in the software product, 
the publisher of the software product is the publisher in the authorization 
process and the software product is the software program in the authorization 
process, whereby both the software toolset and the software product use the 
same authorization process to obtain respective licenses. 

2 (Original) The method of claim 1 further includes the step of transferring the first 
and second private keys to a key authority for receiving license requests and 
generating licenses. 

3 (Original) The method of claim 1 further includes the step of including product and 
customer information within the license request and license documents. 

4 (Original) The method of claim 1 further includes the step of associating the license 
request with a financial transaction, and incorporating financial transaction 
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information within the license. 

5 (Original) The method of claim 1 further includes the steps of: 

(a) assigning a publisher ID to the publisher, 

(b) embedding the publisher ID within the authorization program, 

(c) including the publisher ID within the license, and 

(d) comparing the embedded publisher ID with the publisher ID within the license 
to verify the publisher of the software program to be authorized has 
generated the license. 

6 (Currently amended) The method of claim 1 further including the steps of: 

(a) G e n e rat i ng generating a machine fingerprint within the authorization process, 

(b) incorporating the machine fingerprint within the license request, 

(c) incorporating the machine fingerprint within the license terms, and 

(d) using by the authorization program the machine fingerprint to prevent use of 
the software product on a different machine than the one which made the 
license request. 

7 (Currently amended) A method for deliver|y of a license-managed toolset for 
creating a license-managed software product, the method comprising the step of: 

(a) providing an authorization process, the authorization process including the 
steps of: 

(i) creating a first public and private key pair for a software publisher, and 
creating a first certificate with the public key using a certificate 
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authority, 

(ii) creating a second public and private key pair for a software program, 
and creating a second certificate with the software publisher private 
ke y, wherein at least one of the second private and public keys is 
digitally signed bv the first private key of the software publisher . 

(iii) creating an authorization program for the software program, and 
embedding a copy of the first and second certificates and second 
private key in the authorization program, 

(iv) combining the authorization program with a software program, such 
that when the software program is invoked on a computer, the 
authorization program obtains a license for the software program by: 

(1) creating a formatted license request, 

(2) signing the formatted license request using the second public key, 

(3) transmitting the signed formatted license request to a key authority, 

(4) receiving an signed formatted license from the key authority, 
wherein the license includes license terms, and 

(5) validating the license using the first certificate, such that the license 
terms are used to control use of the software program; 

(b) implementing the authorization process in the-a software toolset that is 
provided by a toolset publisher, wherein when the authorization process is 
invoked in the software toolset, the toolset publisher is the publisher in the 
authorization process and the software toolset is the software program in the 
authorization process, and 

(c) implementing the authorization process in the_a software product that is 
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provided by a publisher of the software product using the software toolset, 
wherein when the authorization process is invoked in the software product, 
the publisher of the software product is the publisher in the authorization 
process and the software product is the software program in the authorization 
process, whereby both the software toolset and the software product use the 
same authorization process to obtain respective licenses. 

8 (Original) The method of claim 7 further includes the step of including product and 
customer information within the license request and license documents. 

9 (Original) The method of claim 7 further includes the step of associating the license 
request with a financial transaction, and incorporating financial transaction 
information within the license. 

10 (Original) The method of claim 7 further includes the step of formatting the license 
request and license using a proposed signed XML document format. 

11 (Original) The method of claim 7 further includes the step of generating the first 
public and private key pair for the software product publisher during the authorization 
process for the toolset, using the steps of: 

(a) creating the first public and private key pair for the software publisher prior to 
using the authorization process for the toolset; 

(b) including the public key within the license request document in the form of a 
certificate request; 
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(c) receiving the certificate within the license document, and 

(d) using the received certificate in conjunction with the private key as the first 
key pair in the authorization process for the software product. 

12 (Original) The method of claim 7 further includes the step of transferring the first 
and second private keys and certificates to a key authority for receiving license 
requests and generating licenses. 



13 (Original) The method of claim 7 further includes the steps of: 

(a) assigning a publisher ID to the publisher, 

(b) including the publisher ID within the publisher certificate, included within the 
software product license, 

(c) embedding the publisher ID within the authorization program. 

(d) comparing the embedded publisher ID with the publisher ID within the 
certificate to verify the publisher of the software program to be authorized has 
generated the license. 



14 (Currently amended) The method of claim 7 further including the steps of: 

(a) G e n e rat i ng g enerating a machine fingerprint within the authorization process, 

(b) incorporating the machine fingerprint within the license request, 

(c) incorporating the machine fingerprint within the license terms, and 

(d) using by the authorization program the machine fingerprint to prevent use of 
the software product on a different machine than the one which made the 
license request. 
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